In simple English
This system tracks who has access to which computer accounts in your company. It automatically creates new logins when someone joins and removes them when they leave. It also checks that people only see the files and tools they need for their work. Setting it up takes significant technical skill and a dedicated server. It is free to download and use under an open source licence.
What it is
MidPoint is an identity governance and administration platform written in Java. It connects to your databases, cloud services and local servers to manage user accounts from one place.
What it is good for
It fits growing companies that need strict control over who can log into their software systems. It removes the manual work of creating and deleting accounts across dozens of separate tools.
- Manages user accounts across many different external systems from one place.
- Automatically creates or removes access when people join or leave your team.
- Includes a web-based administration screen for managing permissions.
- High setup difficulty for a non-programmer, as it requires deep configuration.
- Needs several gigabytes of memory to run the Java runtime environment smoothly.
- Uses a custom or European Union public licence that requires careful review for commercial use.
manual user account creation across multiple cloud tools
PostgreSQL
- keycloak/keycloak37k stars
Another large open source project for user authentication and identity management.
- michelp/pgsodium614 stars
A PostgreSQL extension that brings libsodium's encryption functions into SQL, with a root key the database cannot read back.
- pgaudit/pgaudit1.7k stars
A PostgreSQL extension that records what was done to the database, in the database's own log.
- openbao/openbao8.6k stars
A secrets manager that stores keys and passwords, hands them out on request, and can revoke them.
Download the release package from the official website and run it on a Java server.